CVE record · 4 sources
CVE-2026-15176
CVSS 8.1A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a…
- Vendor
- F5
- Product
- NGINX
- CVSS
- 8.1
- EPSS
- 0.002 (p14)
- Exposure class
- Web platform
Coverage
4Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
nginx vulnerabilities
It was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite rules. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of…
-
nginx - security update
Several vulnerabilities were discovered in nginx, a high performance web and reverse proxy server. Depending on the configuration, these could result in memory corruption, denial of service, injection of requests to backend…
-
A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a…
A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $request_filename variable. Alternatively…